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Abstract 

We perform a comprehensive measurement analysis of Silk Road, an anonymous, international on- 
line marketplace that operates as a Tor hidden service and uses Bitcoin as its exchange currency. We 
gather and analyze data over eight months between the end of 2011 and 2012, including daily crawls 
of the marketplace for nearly six months in 2012. We obtain a detailed picture of the type of goods 
being sold on Silk Road, and of the revenues made both by sellers and Silk Road operators. Through 
examining over 24,400 separate items sold on the site, we show that Silk Road is overwhelmingly used 
as a market for controlled substances and narcotics. A relatively small "core" of about 60 sellers has 
been present throughout our measurement interval, while the majority of sellers leaves (or goes "under- 
ground") within a couple of weeks of their first appearance. We evaluate the total revenue made by all 
sellers to approximately USD 1.9 million per month; this corresponds to about USD 143,000 per month 
in commissions perceived by the Silk Road operators. We further show that the marketplace has been 
operating steadily, with daily sales and number of sellers overall increasing over the past few months. We 
discuss economic and policy implications of our analysis and results, including ethical considerations for 
future research in this area. 

Keywords: Online crime, web frauds, electronic commerce. 
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Figure 1 : Silk Road front page. The site offers a number of licit and illicit items, with a marked focus on 
narcotics. 

1 Introduction 

"More brazen than anything else by light-years" is how U.S. Senator Charles Schumer characterized Silk 
Road J3, an online anonymous marketplace. While perhaps a bit of a hyperbole, this sentiment is character- 
istic of a certain nervousness among political leaders when it comes to anonymous networks. The relatively 
recent development of usable interfaces to anonymous networks, such as the "Tor browser bundle," has in- 
deed made it extremely easy for anybody to browse the Internet anonymously, regardless of their technical 
background. In turn, anonymous online markets have emerged, making it quite difficult for law enforcement 
to identify buyers and sellers. As a result, these anonymous online markets very often specialize in "black 
market" goods, such as pornography, weapons or narcotics. 

Silk Road is one such anonymous online market. It is not the only one - others, such as Black Market 
Reloaded 0, the Armory H), or the General Store are offering similar services - but it gained fame 
after an article posted on Gawker iTTOl . which resulted in it being noticed by congressional leaders, who 
demanded prompt action be taken. It is also reportedly very large, with estimates mentioned in the Silk 
Road online forum @ ranging between 30,000 and 150,000 customers. 

Figure Q] shows the Silk Road front page. The site has a professional, if minimalist, look, and appears 
to offer a variety of goods (e.g., books, digital goods, digital currency...), but seems to have a clear focus on 
drugs. Not only do most items listed appear to be controlled substances, but the screenshot also shows the 
site advertising a sale campaign for April 20 - also known as "Pot day" due to the North American slang for 
cannabis (four-twenty). 

In this paper, we try to provide a scientific characterization of the Silk Road marketplace, by gathering a 
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set of controlled measurements over roughly six months (February 3, 2012 - July 24, 2012), and analyzing 
them. 

Specifically, we offer the following contributions. We devise a (simple) collection methodology to obtain 
publicly available Silk Road market data. We use the data collected to characterize the items being sold on 
Silk Road and the seller population. We describe how items sold and seller population have evolved over 
time. Using (mandatory) buyer feedback reports as a proxy for sales, we characterize sales volumes over 
our measurement interval. We provide an estimate of the daily dollar amount of sales conducted on Silk 
Road, and use this estimate to infer the amount perceived in commission by Silk Road operators. While we 
cannot estimate the number of buyers, we show that Silk Road is a relatively significant market, with a few 
hundred sellers, and monthly total revenue of about USD 1.9 million. We also show that Silk Road appears 
to be growing over time, albeit not at the exponential rate that is claimed in forums |6). 

The rest of this paper is structured as follows. We start by describing how Silk Road operates in Sec- 
tion |2] We then explain how we collect our measurements in Section [3] We report on our measurements 
analysis in Section [4] before turning to economic implications in Section [5] We discuss our findings, reflect 
on possible intervention policies, and ethical considerations linked to this work in Section [6j outline related 
work in Section |7J and conclude in Section [8] 



2 Silk Road overview 

Silk Road is an online anonymous marketplace that started its operations in February 2011 |6). Silk Road 
is not, itself, a shop. Instead, it provides infrastructure for sellers and buyers to conduct transactions in an 
online environment. In this respect, Silk Road is more similar to Craigslist, eBay or the Amazon Marketplace 
than to Amazon.com. The major difference between Silk Road and these other marketplaces is that Silk 
Road focuses on ensuring, as much as possible, anonymity of both sellers and buyers. In this section, 
we summarize the major features of Silk Road through a description of the steps involved in a typical 
transaction: accessing Silk Road, making a purchase, and getting the goods delivered. 

Accessing Silk Road. Suppose that Bob (B), a prospective buyer, wants to access the Silk Road marketplace 
(M). Bob will first need to install a Tor client on his machine, or use a web proxy to the Tor network (e.g. 
|http : //tor2web . org| ) as Silk Road runs only as a Tor hidden service ifTTll . That is, instead of having 
a DNS name mapping to a known IP address, Silk Road uses a URL based on the pseudo-top level domain 
. onion, that can only be resolved through Tor. At a high level, when Bob's client attempts to contact the 



Silk Road server URL ( |http : / / silkroadvb5piz3r . onion| at the time of this writing), Tor nodes 



set up a rendez-vous point inside the Tor network so that the client and server can communicate with each 
other while maintaining their IP addresses unknown from observers and from each other. 

Once connected to the Silk Road website, Bob will need to create an account. The process is simple and 
merely involves registering a user name, password, withdrawal PIN, and answering a CAPTCHA. After this 
registration, Bob is presented with the Silk Road front page (see Figure [B from where he can access all of 
Silk Road's public listings. 

Public and stealth listings. Silk Road places relatively few restrictions on the types of goods sellers can 
offer. From the Silk Road sellers' guide Q, 

"Do not list anything who's (sic) purpose is to harm or defraud, such as stolen items or info, 
stolen credit cards, counterfeit currency, personal info, assassinations, and weapons of any kind. 
Do not list anything related to pedophilia." 
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Conspicuously absent from the list of prohibited items are prescription drugs and narcotics, as well as 
pornography and fake identification documents (e.g., counterfeit driver's licenses). Weapons and ammuni- 
tion used to be allowed until March 4, 2012, but have since then been re-listed on a sister site called The 
Armory HI, which operates with an infrastructure similar to that of Silk Road. 

Not all of the Silk Road listings are public. Silk Road supports stealth listings, which are not linked from 
the rest of Silk Road, and are thus only accessible by buyers who have been given their URL. Stealth listings 
are frequently used for custom listings directed at specific customers, and established through out-of-band 
mechanisms (e.g., private messaging between seller and buyer). Sellers may further operate in stealth mode, 
meaning that their seller page and all the pages of the items they have for sale are not linked from other Silk 
Road pages. While Silk Road is open to anybody, stealth mode allows sellers with an established customer 
base to operate their business as invitation-only. 

Making a purchase. After having perused the items available for sale on Silk Road, Bob decides to make a 
purchase from Sarah (S). While Tor ensures communication anonymity, Silk Road needs to also preserve 
payment anonymity. To that effect, Silk Road only supports Bitcoin (BTC, ll28l ) as a trading currency. 
Bitcoin is a peer-to-peer, distributed payment system that allows anonymous transactions between different 
parties. Bob thus needs to first procure Bitcoins, which he can do from the many online trading places such 
as Mt.Gox [4J. At the time Bob purchases the item from Sarah, instead of paying Sarah directly, Bob places 
the corresponding amount in escrow with the site operator. Effectively, B pays M, who will subsequently 
pay S. The escrow mechanism allows the market operator to accurately compute their commission fees, and 
to resolve disputes between sellers and buyers. Silk Road mandates all sellers and buyers use the escrow 
system. Failure to do so is punishable by expulsion from the marketplace 0. 

Finalizing. Once the purchase has been made, Sarah must ship it to Bob. Thus, Sarah needs a physical 
address where to send the item. To preserve anonymity, Silk Road recommends to use delivery addresses 
that are distinct from the buyer's residence. For instance, Bob could have the item delivered at Patsy's house. 
Once Sarah has marked the item as shipped, Bob's delivery address is erased from all records. Once the item 
reaches its destination, Bob finalizes the purchase, that is, he releases the funds held in escrow to Sarah, and 
leaves feedback about Sarah. Finalizing is mandatory - if Bob forgets to do so, the site will automatically 
finalize pending orders after a set amount of time. 

Established sellers with more than 35 successful transactions and who have been active for over a month 
are allowed to ask their buyers to finalize early; that is, to release payment and leave feedback before they 
actually receive the item. Due to the potential for abuse, Silk Road discourages finalizing early in general, 
and prohibits it for new sellers. 

Finally, Silk Road enhances transaction anonymity by providing "tumbler" services that consist of in- 
serting several dummy, single-use intermediaries between a payer and a payee. That is, instead of hav- 
ing a payment correspond to a single transaction B — > S, the payment goes through a transaction chain 
B — > I\ — >• . . . — > I n — > S where . . . I n ) are one-time-use intermediaries. 

3 Collection methodology 

We next turn to describing how we collected measurements of the Silk Road marketplace. We first briefly 
explain our crawling mechanism, before outlining some of the challenges we faced with data collection. We 
then discuss in detail the data that we collected. 
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3.1 Crawling mechanism 

We registered an account on Silk Road in November 2011, and started with a few test crawls. We imme- 
diately noticed that Silk Road relies on authentication cookies that can be reused for up to a week without 
having to re-authenticate through the login prompt of the website. Provided we can manually refresh the au- 
thentication cookie at least once per week, this allows us to bypass the CAPTCHA mechanism and automate 
our crawls. 

We conducted a near-comprehensive crawl of the site on November 29, 20110 using HTTrack ll32l . 
Specifically, we crawled all "item," "user" (i.e., seller) and "category" webpages. The complete crawl 
completed in about 48 hours and corresponded to approximately 244 MB of data, including 124MB of 
images. 

Starting on February 3, 2012, and until July 24, 2012, we attempted to perform daily crawls of the 
website. We noticed that early in 2012, Silk Road had moved to inlining images as base64 tags in each 
webpage. This considerably slowed down crawls. Using an incremental mode, that is, ignoring pages that 
had not changed from one crawl to the next, each of these crawls ran, on average, for about 14 hours. The 
fastest crawl completed in slightly over 3 hours; the slowest took almost 30 hours, which resulted in the 
following daily crawl to be canceled. To avoid confusion between the time a crawl stalled, and the time a 
specific page was visited, we recorded separate timestamps upon each visit to a given page. 

3.2 Challenges 

Kanich et al. lfl5l emphasize the importance of ensuring that the target of a measurement experiment is not 
aware of the measurement being conducted. Otherwise, the measurement target could modify their behavior, 
which would taint the measurements. We thus waited for a few days after the November crawl to see if the 
full crawl had been noticed. Perusing the Silk Road forums J6], we found no mention of the operators 
noticing us; our account was still valid and no one contacted us to inquire about our browsing activities. 
We concluded that we either had not been detected, or that the operators did not view our activities as 
threatening. 

We spent some additional effort making our measurements as difficult to detect as possible. Since all 
Silk Road traffic is anonymized over Tor, there is no risk that our IP address could be blacklisted. However, 
an identical Tor circuit could be repeatedly used for crawling if the application (HTTrack in this case) keeps 
the same socket open; this in turn could reveal that we are crawling the entire site. We addressed this 
potential issue by ensuring that all circuits (including active circuits) are periodically discarded and new 
circuits are built. To further (slightly) obfuscate our activities, instead of always starting at the same time, 
we started each crawl at a random time between 10pm and lam UTC. 

Despite all of these precautions, we had to discard some of our data. On March 7, 2012 a number of 
changes were implemented to Silk Road to prevent profiling of the site [6]. Whether this was due to Silk 
Road operators noticing our crawls or to other activity is unclear. URL structure changed: item and users, 
instead of being referenced by a linearly increasing numeric identifier, became unique hashes. Fortunately, 
these hashes simply consist of a substring of the MD5 hash of the numeric identifier, making it easy to 
map them to the original identifiers. More annoyingly, feedback data, which is crucial to estimating the 
volume of sales became aggregated and feedback timestamps disappeared. That is, instead of having, for 
an item G sold by S a list of n feedback messages corresponding to n purchases of G along with the 
associated timestamps, Silk Road switched to presenting a list of 20 feedback messages, undated, across 
all the items sold by S. In other words, feedback data became completely useless. Thankfully, due to 

'All dates and times are expressed in Universal Time Coordinates (UTC). 
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Description: 

Hacking For Beginners is a reference book for beginners to learn ethical hacking for free and from basic level to clear all 
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Figure 2: Silk Road item page. Each item page contains seller, price, and shipping information, as well as 
buyer feedback on the item. 

very strong pushback from buyers who argued that per-item feedback was necessary to have confidence in 
purchases (6j, Silk Road operators reverted to timestamped, per-item feedback on March 12, 2012. As a 
consequence, we had to discard all feedback data collected between March 7, 2012 and March 12, 2012. 

Finally, in several instances, Silk Road went down for maintenance, or authentication was unsuccessful 
(e.g., because we had not refreshed the authentication cookie in time), leading to a few sporadic days of 
missing data. The largest gaps are two eight-day gaps between April 10, 2012 and April 17, 2012 due to an 
accidental suspension of the collection infrastructure; and between July 12, 2012 and July 19,2012, due to 
an accidental deletion of the authentication cookie. 

3.3 Data collected 

We can only collect data that is publicly accessible over the Tor network. That is, we cannot collect buyer 
data, as buyers do not have "buyer pages." We also cannot collect stealth listings, or data about sellers when 
they operate in stealth mode. 

We primarily focus data collection on "item pages," that is, pages describing the goods being sold on 
Silk Road. We show an example in Figure|2] Each item page is bound to a unique item identifier as part of its 
URL (integer until March 7, 2012, 10-digit hash afterwards), and contains the name of the item ("Hacking 
for beginners" in Figure O, a picture, the category in which the item fits (e.g., "Books"), seller information 
(a name, percentage of positive feedback, and a hyperlink denoting the seller unique identifier), price (e.g., 
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0.12 BTC), shipping information, item description, and buyer feedback. We gather all of this information 
for each item we crawl, and record a timestamp (in UNIX epoch time) every time the page is visited. 

Feedback data. Each piece of feedback consists of three fields: a rating between 1 and 5, a textual description 
of the feedback, and the age of the feedback. Feedback age is expressed in minutes, hours, days or months, 
depending on how old the feedback is. Hence, we can timestamp much more accurately feedback recently 
given at the time of the crawl, than older feedback. This is one of the reasons for crawling Silk Road daily: 
the age of feedback less than a day old can be quite precisely pinpointed. 

We record feedback in two different manners. For each crawl of Silk Road started at time t and lasting 
until t + r (r > 0) , we record all feedback present on the site in a separate database V t , thereby getting 
a snapshot of the feedback amassed until time t + r. This method may miss some feedback. For instance, 
if we crawl an item page at time t + t\, and a customer leaves feedback at time t + T2 with t\ < T2 < r, 
that customer's feedback will not be recorded as part of the time-i snapshot. Furthermore, timestamps of 
feedback given long before t may be very approximate. 

To address this issue, we also record, in a database V, novel feedback from one crawl to the next, that 
is, feedback for which text did not previously appear in our records for this specific item. This method 
guarantees that feedback timestamps are as accurate as possible (since they are recorded as soon as the 
feedback is observed). Furthermore, we can capture nearly all the feedback present on the site, without 
worrying about collection gaps. However, a drawback of this method is that it may overestimate the amount 
of feedback when there are feedback updates. In particular, new buyers are sometimes asked to finalize 
early, that is, to send feedback immediately after the online transaction is completed and before receiving 
goods. They may elect to update the feedback after delivery of the goods purchased, which can be weeks 
later. When this happens, the original feedback is replaced on the website by the new feedback, and the 
timestamp is updated. However, V contains both the original, and the updated feedback(s), even though only 
one sale occurred. Maintaining both a family (V t ) of database of snapshots of the site, and a cumulative 
database V allows us to have lower and upper bounds on the amount of feedback posted on the site, which 
in turn in a useful indicator of sales. 

Unfortunately, the time at which feedback is entered does not, in general, correspond to the time the 
item was purchased, but to the time the item was delivered. Hence, feedback data is an imperfect proxy 
for accurately estimating daily sales volume. Over a collection interval of a couple of months, however, 
feedback data is a good indicator of the overall volume of sales. 

4 Marketplace characteristics 

In this section we describe the Silk Road as a marketplace. That is, we provide an overview of the types of 
goods being sold in Silk Road, before discussing seller characteristics. 

4.1 What is being sold? 

Items offered on Silk Road are grouped by categories. There are approximately 220 distinct categories, 
ranging from digital goods to pornographic materials, to various kinds of narcotics or prescription medicine. 
In Figure [3l we plot, on the left-hand side, for each category, the number of items sold in that category, 
over the data collected from February 3, 2012 through July 24, 2012. For readability we ordered categories 
by decreasing popularity. In total, we found 24,422 unique items being sold over that period. While a 
few categories seem to hold the most items, Silk Road, like other online marketplaces, exhibits a long-tail 
behavior, where a large number of items appear to be unique. This is confirmed by the right-hand graph, 
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Figure 3: Distribution of items per category. The plots show the number of items in each category, ordered 
by decreasing popularity (left) and the cumulative distribution of all items over all categories (right). The 
20 most popular categories represent over 2/3 of all items available. 



where we plot the cumulative distribution of items as a function of the number of categories considered. 
The right-hand graph shows that over two thirds of all products sold on Silk Road during our data collection 
interval belong to one of the top 20 categories, but that, after that, the cumulative fraction of items only 
slowly converges to 1 . 

In Table [Q we take a closer look at the top 20 categories per number of item offered. "Weed" (i.e., 
marijuana) is the most popular item on Silk Road, followed by "Drugs," which encompass any sort of 
narcotics or prescription medicine the seller did not want to further classified. Prescription drugs, and 
"Benzos," colloquial term for benzodiazepines, which include prescription medicines like Valium and other 
drugs used for insomnia and anxiety treatment, are also highly popular. The four most popular categories 
are all linked to drugs; nine of the top ten, and sixteen out of the top twenty are drug-related. In other words, 
Silk Road is mostly a drug store, even though it also caters some other products. Finally, among narcotics, 
even though such a classification is somewhat arbitrary, Silk Road appears to have more inventory in "soft 
drugs" (e.g., weed, cannabis, hash, seeds) than "hard drugs" (e.g., opiates); this presumably simply reflects 
market demand. 

Item availability. In Figure 0J we show how long items are available on Silk Road. To do so, we record the 
first time we saw an item being listed, and the last time we saw it listed. Items may have been listed and de- 
listed several times in the meantime; here we are only looking at the overall lifespan of an item, regardless 
of its transient availability. Most items are only available for short periods of time, with a vast majority of 
items disappearing within a few days from the listings. We also discover a few very long-lived items (on the 
right-hand side of the graph) that have been essentially present for the entire collection interval (February 3, 
2012-July 24, 2012). There may be two different explanations for the relatively short lifespan of each item: 
vendors may run out of stock quickly and de-list their items, possibly re-listing them later under a slightly 
different name resulting in a different item page, or they may elect to make them stealth listings as soon as 
they have established a customer base. 

Custom listings. Finally, public custom listings are relatively rare. Out of the 24,422 items we observed, 
only 737 were explicitly marked as "custom listings." This is undoubtedly a lower bound, as custom listings 
have no reason not to be stealth listings. 
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Table 1 : Top 20 categories in terms of items available. Products sold on Silk Road are mostly listed as 
narcotics or controlled substances. 
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Figure 5: Evolution of the number of sellers. As a point of comparison, there were only 220 sellers on 
Nov. 29, 2011. 



4.2 Who is selling? 

Due to the anonymous nature of Silk Road, it is impossible to discern whether certain sellers use multiple 
seller pages. Likewise, several sellers in the physical world may offer their goods through a unique seller 
page on Silk Road, although this would certainly be a clear indication of a business partnership. In this 
discussion we will equate "sellers" with distinct seller pages. 

Evolution over time. In Figure we plot the evolution of the number of sellers on Silk Road over time, 
between February 3, 2012 until our last daily crawl (July 24, 2012). 

On July 24, 2012, we found 564 distinct sellers with at least one item listed for sale on Silk Road. This 
is a marked increased compared to the 220 sellers we had observed during our initial crawl on November 
29, 201 1 (not shown on the figure). The gaps in the figure correspond to data collection gaps. An interesting 
spike occurs around April 20, 2012. April 20 featured a large promotional sale on Silk Road to mark "Pot 
Day." It appears that a number of sellers entered the marketplace in the week or two prior to this operation; 
and a non-negligible number left immediately afterwards. Finally, the Silk Road forums indicate that one 
of the top sellers went on hiatus on March 12, 2012. It is unclear whether this played a role in the marked 
increase of the number of sellers since that time - i.e., whether newcomers attempted to fill the void. The 
main lesson from this data is that the number of active sellers has been continuously increasing, at least 
since early March. A linear regression fit in Figure [5j gives y = 1.68a; — 68514 (R 2 = 0.96887), where x is 
in days, y the number of active sellers. In other words, the increase in the number of sellers appears linear, 
with about 50 new active sellers each month. 

However, this simple regression analysis does not accurately reflect the fact that many sellers actually 
leave the marketplace. Over the measurement interval February 3, 2012- July 24, 2012, we indeed found 
1 ,397 distinct sellers were at one point or another publicly listed. Figure [6] shows the number of sellers as 
a function of their presence on the site, and presents two interesting trends. First, about 4% of all of these 
sellers (58 sellers) have been around over the entire measurement interval. In other words, there is a core of 
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Figure 6: Number of sellers as a function of their presence on the site (in days). Most sellers leave the 
site fairly quickly; at the same time a core of about 4% of all sellers have been on the site for the entire 
duration of our measurements. 



"old timers" on Silk Road. Second, and perhaps more interestingly, a majority of sellers are only on the site 
for less than two months; and in particular a lot of sellers are present only for a couple of weeks at most. 
This may be because they leave the site as soon as they are done selling their products; or because they move 
into stealth mode as soon as they have established a large enough customer base. 

Geographic location. Next, for the pool of 24,422 items we observed over our data collection between 
February 3, 2012 and July 24, 2012, we describe the listed origin of the item, as well as the listed acceptable 
shipping destinations of the items. Table [2] shows the top 12 locations for both origin and destinations. 
Some items ship to multiple destinations (e.g., Norway, Switzerland and European Union) so that the total 
of the rightmost column adds up to more than 100%. Most items ship from the United States, with the 
United Kingdom a distant second. The Netherlands are also strongly represented, which is not necessarily 
surprising given the relatively permissive narcotics laws in the country. We note a clear bias toward English- 
speaking countries which represent almost two-thirds of all listed origins. This can easily be explained by 
the fact that all communications on Silk Road are in English. 

More surprisingly, we note that a majority of items ship worldwide, in spite of the nature of the items, as 
discussed above. One would think that sellers may be reluctant to ship narcotics across borders. It turns out 
not to be the case, for a couple of reasons. First, sellers with an established reputation may often demand that 
buyers pay upon purchase, and before delivery of the item. If the item is not delivered, the buyer may have 
very little recourse, particularly if they have not established a strong reputation in the marketplace. While, 
as discussed in Section |2j Silk Road offers an escrow service, disputes arising after "early finalization" are 
considerably harder to mediate by the marketplace operators. Second, the quantities being sold are generally 
rather small (e.g., a few grams of marijuana), and tracing the senders may be a very difficult task as they 
can use private couriers to ship the items. Third, most sellers use techniques to make package inspection 
unlikely - e.g., vacuum sealing, "professional-looking" envelopes with typed destination addresses 0. In 



11 



Origin Acceptable destinations 



Country 


Pet. 


Country/Region 


Pet. 


U.S.A. 


43 86% 


Worldwide 


49.70% 


Undeclared 


16.28% 


U.S.A. 


35.13% 


U.K. 


10.14% 


European Union 


6.19% 


"Np Hip Hands 


6.51% 


Canada 


6.04% 


Canada 


5.91% 


U.K. 


3.65% 


Germany 


4.50% 


Australia 


2.87% 


Australia 


3.19% 


World, exept. U.S.A. 


1.39% 


India 


1.22% 


Germany 


1.03% 


Italy 


1.02% 


Norway 


0.70% 


China 


0.97% 


Switzerland 


0.61% 


Spain 


0.93% 


New Zealand 


0.57% 


France 


0.82% 


Undeclared 


0.26% 



Table 2: Top 12 most frequent shipping origins (left), and acceptable shipping destinations (right). 

Certain sellers ship to multiple destinations, hence the rightmost column totals more than 100%. 



other words, sellers can expand their customer base at a relatively low risk for them. Economic incentives 
justify worldwide shipping, especially since sellers can factor in their selling price the risk of package 
seizure, and accordingly offer loyal customers at least partial refund guarantees. 

Seller ranking. We next look at seller market share on Silk Road. As we showed above, there have been 
1,397 sellers on Silk Road between February 3, 2012 and July 24, 2012, with between 281 and 564 active 
at a time. Figure |7] shows the proportion of items in the marketplace as a function of the number of sellers. 
The main lesson learned from this figure is that there is not any very large seller - in terms of number of 
items sold. Instead, each seller accounts, at most, for 1.5% of the total number of items found on Silk Road. 

While it does not appear like a given seller (or group of sellers) sells a significant proportion of items 
overall, it could be the case that a few selected items sell in large quantities. As discussed in Section [3] we 
use the amount of feedback collected as a proxy for the number of sales made. In Figure [U we plot, on the 
left-hand side, the number of feedback received per seller (where sellers are ranked in decreasing amount of 
feedback received), and on the right-hand side the cumulative fraction of total feedback as a function of the 
number of sellers considered. These plots show that a few sellers indeed receive a large amount of feedback, 
in absolute terms. For instance, the seller with the largest volume of sales received 4,843 feedback messages 
over the six months we monitored. 

However, the market is quite spread out between sellers, as can be seen on the right-hand graph. Roughly 
sixty sellers correspond to 50% of all feedback gathered. Considering we previously observed that a "core" 
of 58 sellers have been present throughout our measurements, we hypothesized that this core was perhaps 
the most active. In Figure |9j we use a scatter-plot to graph the amount of feedback received (in logarithmic 
scale) by each seller against the number of days the seller has been present on the site. While the graph 
suggests a positive correlation between the two quantities, that correlation appears quite weak. This is 
confirmed by computing Pearson's correlation coefficient between the two datasets: we get r pa 0.42. In 
other words, there are a number of sellers that do not appear to stay very long on the site, but amass a large 
number of transactions, while on the other hand, some of the "old timers" appear to relatively rarely engage 
in transactions. These results may be due to the sellers electing to go in stealth mode after having built up a 
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200 400 600 800 1000 1200 1400 
Number of sellers 



Figure 7: Proportion of items in the marketplace as a function of the number of sellers. We observe 
fairly high diversity, with each seller selling at most 1.5% of the total number of items in Silk Road. 




800 1000 1200 



Sellers (ordered by decreasing volume) Number of sellers (ordered by decreasing volume) 

Figure 8: Number of feedback received per seller (left) and cumulative fraction of all feedback ob- 
served over the collection interval as a function of the number of sellers (right). The top 100 sellers are 
responsible for approximately 60% of all feedback gathered, which is a strong indicator of the number of 
sales made. 
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Figure 9: Amount of feedback received by sellers vs. the amount of time sellers have been listed on the 
site. There is a modest positive correlation between the two quantities with Pearson's correlation coefficient 
r PS 0.42. 



Rating 


Number 


Pet. 


5/5 


181293 


96.5% 


4/5 


2471 


1.3% 


3/5 


1465 


0.8% 


2/5 


525 


0.3% 


1/5 


2071 


1.1% 



Table 3: Distribution of feedback ratings. A vast majority of transactions seems to proceed to the satis- 
faction of the buyers. 



large enough user base, or to list most of their products as stealth listings. 



4.3 Customer satisfaction 

We next discuss customer satisfaction. On a site like Silk Road, where, as shown above, most of the goods 
sold are illicit, one would expect a certain amount of deception to occur. Indeed, a buyer choosing, for 
instance, to purchase heroin from an anonymous seller would have very little recourse if the goods promised 
are not delivered. Surprisingly, though, most transactions on Silk Road seem to generate excellent feedback 
from buyers. Table [3] provides a breakdown of the feedback ratings from 187,825 feedback instances we 
collected. 97.8% of feedback posted was positive (4 or 5 on a scale of 1 to 5). In contrast, only 1.4% of 
feedback was negative (1 or 2 on the same scale). 

Thus, it appears at first glance that Silk Road sellers are highly reliable. We caution, however, against too 
rapid an interpretation of this result. First, a study by Resnick and Zeckhauser iPTI shows that Internet users 
in general disproportionately use positive feedback when rating online experiences. In fact, over 99% of the 
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feedback in the eBay corpus used in that study OTTl was positive. Second, not all transactions have feedback 
reported. Indeed, a number of transactions are made "out of escrow," i.e., directly between a seller and a 
buyer. For those, there is no feedback mechanism, nor any oversight possible from the Silk Road operators. 
We suspect most of the scampi occur "out of escrow," and of course, no feedback for these transactions is 
reported since they technically do not exist (from the market operator standpoint). 

Finalizing early. We observe that 19,396 instances of feedback contain variations of "EE.," "finalizing 
early," or "finalize early." This shows that finalizing early is a rather common practice on Silk Road. There 
does not appear to be significantly more problems reported with feedback including such strings (only 313 
of them map to a rating of 1 or 2). This seems to show that established sellers that are offered the option of 
requesting early finalization from their customers do not abuse that privilege. 

5 Economic aspects 

We next present a brief discussion of economic indicators on Silk Road. We start by looking at the evolution 
of the prices of a basket of items. We then turn to estimating transaction volumes that occur on Silk Road. 

5.1 Inflation 

All transactions on Silk Road are using Bitcoins (BTC). Bitcoin has been a notoriously volatile currency, 
going from 1 BTC being worth around 30 cents in January 2011 to 1 BTC reaching USD 31.90 in an intra- 
day high on June 8, 2011, and declining rapidly back to approximately 1 BTC«USD 2.5 in late October 
2011. 
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Figure 10: Evolution of the value of a Bitcoin in the three major currencies used in the countries of 
the sellers operating on Silk Road, over our collection interval. Each point corresponds to a weighted 
average over a given day. Data is from Mt.Gox JH. 



2 The Silk Road operators in fact warn that buyers relying on out of escrow transactions "have been scammed J5J-" 
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In Figure \lO\ we plot the evolution of the exchange rate of the Bitcoin against the three major currencies 
that sellers use in their countries, over the duration of our measurements. As can be seen in the figure, the 
Bitcoin exchange rate has remained relatively stable between the end of February and early May, oscillating 
around 1 BTCsaUSD 5, and corresponding values in euros and pounds. Since then, the Bitcoin has notably 
appreciated, reaching close to USD 9 since mid- July 2012, with relatively large fluctuations in value. 




02/01 03/01 



04/01 05/01 06/01 
Date (all dates 2012) 



07/01 08/01 



0.7 
02/01 



03/01 04/01 05/01 06/01 
Date (all dates 2012) 



07/01 08/01 



Figure 1 1 : Evolution of the normalized price of the five most sold items on Silk Road in BTC (left) 
and seller's currency (right). The evolution closely mirrors the evolution of the Bitcoin exchange rates, 
suggesting little inflation for these items over the time interval considered. 



We look at the evolution of the normalized price of the five best-selling items on Silk Road, correspond- 
ing to between 1,100 and 1,591 pieces of feedback collected. These five items correspond to five different 
categories, and have prices ranging from 0.2 BTC to over 100 BTC. For any time t, the normalized price 
compared to origin to is defined as P(t)/P(to). 

We plot the normalized prices of these five items in Figure [TT] On the left, we observe that they quite 
closely mirror the fluctuations of the Bitcoin exchange rate: as the Bitcoin appreciates, the prices drop; 
conversely, a drop in the Bitcoin value results in a price increase. Silk Road provides automatic pegging of 
prices to existing currencies. It appears that all five items use this system, and there does not seem to be 
considerable variations in prices beyond those due to the exchange rate. 

On the right, we plot the normalized price in the seller's currency. While we do not know where sellers 
are located, we infer seller currency from the place from which each seller claims the items are shipping. 
The plot confirms that there is generally no evidence of rapid inflation (or deflation) on Silk Road as all 
prices remain roughly within ±10% of their original price. We can however refine that observation by 
noticing that item 5's price seems relatively variable, roughly settling around 90% of the value we initially 
saw. More interestingly, we notice a drop in price prior to April 20 for all items. Indeed, this price decrease 
appears to be part of a promotional campaign for "Pot Day.'H A third observation is that item 4 stops 
being sold immediately after April 20. The last time it is observed on the site is April 25, before being 
de-listed. From discussions in Silk Road forums [61, it appears that the seller of that item abruptly left the 
marketplace, potentially leaving a large number of paid, finalized early, orders unfulfilled. In other words, 
there is suspicion of a "whitewashing attack lfT2l ." whereby a seller creates an excellent reputation, before 
using that reputation to defraud users and leaving the system. In hindsight, the 20% drop in price occurring 
just prior to April 20 was considerably steeper than all the other promotional discounts. This could have been 

3 All items here are drugs, or services associated with narcotics shipment. 
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an indicator that the seller was not intending on fulfilling their orders and was instead artificially lowering 
prices in hopes of attracting large numbers of customers to defraud. 



5.2 Transaction volumes 

We next turn to providing an estimate of the total amount of daily sales realized in Silk Road. Obtaining 
this estimate is relatively problematic, because, as explained in Section [3l feedback data is relatively noisy. 
Feedback can be updated, which results in a timestamp update, and in discarding the old feedback; and 
feedback is generally not issued at the time the item is purchased, but instead, when it is shipped. 

We decided to use averages over a sliding window of size 30 days to try to assess the daily sales volumes. 
The averaging mechanism smoothes out potential issues due to delayed feedback. The reason why we limit 
ourselves to thirty days is that timestamps on feedback older than a month are extremely approximate, with 
potential errors of 29 days in the worst case, while timestamps on feedback less than a month old are accurate 
within 24 hours. 




7000 



03/01 04/01 05/01 06/01 07/01 
Date (all dates 2012) 



08/01 



Figure 12: Estimate of the total amount of daily sales (in BTC) occurring on Silk Road. Each point 
corresponds to an average over the prior thirty days. 



We present our results in Figure [12] Each point corresponds to the average daily sales volumes over the 
past 30 days. The sales volumes are computed by, for each item, counting the number of feedback gathered 
about the item over the past thirty days, and multiplying this number by the average price of the item over 
the last thirty days. The estimated daily sales volumes are then simply taken as the monthly sales volume 
divided by 30. 

We observe that the total volume of sales has been increasing quite significantly, going from approx- 
imately 8,000 BTC/day to approximately 15,000 BTC/day, before seemingly retreating down to 11,000 
BTC/day. The latter decrease is, however, an artifact of the Bitcoin shaiply appreciating against all major 
currencies, rather than an indication of a drop in sales. Over our entire collection interval, the daily volume 
of sales approaches 11,650 BTC/day. By means of comparison, the average daily volume of exchanges for 
US dollars on the largest Bitcoin exchange, Mt.Gox [43 is approximately 59,980 BTC/day over the month 
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Item price Op. commission 



first $50 


10% 


$50.01 - $150 


8.5% 


$150.01 - $300 


6% 


$300.01 - $500 


3% 


$500.01 - $1000 


2% 


over $1000 


1.5% 



Table 4: Silk Road operator commission schedule (from January 2012). Prior to the establishment of 
this schedule, the commission was at a flat 6.23% rate. 



of July 2012 0. 

Converting to US dollars, using the Bitcoin exchange rate plotted in Figure [lOl we obtain a total sales 
volume of USD 1 .9 million per month, which corresponds to a projected annual revenue of over 22 million 
USD for the entire marketplace. 

5.3 Operator commissions 

Silk Road operators perceive a commission on all sales realized on the website. The commission schedule 
was originally set at 6.23% of the sales price. In January 2012, a tiered commission schedule was estab- 
lished, using a model similar to that proposed by eBay. Interestingly, the schedule, described in Table HJ is 
based on amounts in US Dollars, not in Bitcoins. The first USD 50 of a sale are charged a 10% commission 
fee, then, from USD 50.01 to USD 150, the fee becomes 8.5%, and further decreases as the value of the 
item sold increases. 
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Figure 13: Estimate of the daily commission perceived by Silk Road operators (in USD). Each point 
corresponds to an average over the prior thirty days. The progressive rate schedule is given in Table HI 
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In Figure [T3J we plot an estimate of the daily commissions perceived by Silk Road operators as a 
function of time. We simply reuse the previous estimates, and apply both the fixed 6.23% rate, and the 
schedule of Table [4] to each item. We find that the new schedule turns out to yield on average a commission 
corresponding to approximately 7.4% of the item price. 

Using the new schedule we find that Silk Road operators have seen their commissions increase from 
roughly USD 3,000/day in March 2012 to roughly USD 6,000/day in July 2012. In other words, even 
though the volume in Bitcoins may have decreased due to the Bitcoin rising against the US dollar, the 
transaction volume in US dollars, and the corresponding commissions, have significantly increased over 
our measurement interval. Over the entire measurement interval, we compute that Silk Road operators 
perceive, an average, roughly 143,000 USD per month in commissions. In other words, over a year, Silk 
Road operators' revenue is probably around 1.7 million US dollars. 

6 Discussion 

While we believe this research may bring up a number of discussions, and hopefully even start a public 
policy debate on the effectiveness of current intervention or prevention strategies for controlled substance 
abuse, we here choose to narrow our focus to two areas. First, we provide an overview of the ethical 
considerations and associated conclusions we came to during the design of this study. Second, we briefly 
evaluate potential intervention policies that have either been proposed or seem natural. 

6.1 Ethical considerations 

Conducting this research yielded some ethical quandaries. Since we are analyzing data from activity that is, 
in most jurisdictions, deemed as criminal, could this work directly lead to arrest or prosecution of individu- 
als? If such were the case, should it be published? 

We answered negatively to the first question. Indeed, the data we collected is essentially public. We 
did have to create an account on Silk Road to access it; but registration is open to anybody who connects 
to the site. We did not compromise the site in any way. Perhaps, bypassing the authentication mechanism 
and associated CAPTCHA by reusing an authentication cookie could be construed as a "hack." However, 
we argue this is nothing more than using a convenient feature that the site operators have willingly offered 
their visitors. Indeed, nothing would prevent the site operators from setting authentication cookies with very 
short expiry dates. 

Considering that the data we obtained is available to anybody, we do not think this work adds any 
additional risk for the Silk Road operators, their customers or their sellers. In fact, as routinely expressed 
in user forums J6), Silk Road operators seem to espouse crypto-anarchist ideals (see, e.g., May |[l"8"T0 and to 
that end, willingly make their website - and, as a result, its data - publicly available. 

Using the Tor network for measurement research. Another ethical consideration is linked to the design of 
the study itself. To acquire the measurements we needed to obtain for analysis, we had to repeatedly crawl 
the Silk Road website. This in turn resulted in extensively using the Tor network for the purpose of this 
work. Because Tor is a relatively resource-constrained network, our measurements could have impacted 
other users that would need it. We believe that the scientific value of this study, and its potential public 
policy impact justified the use of the network we have made. Monitoring our usage, we realized that we 
were downloading between 500 and 800 MB of data per day over the Tor network for this project. While 
certainly not negligible, this remains more modest than a typical movie download. 
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However, we do think our usage of the network (for this project, and related research efforts) should 
be compensated. For this reason, we are currently negotiating with our institution to make a Tor exit node 
available on our network. 

6.2 Potential intervention strategies 

Given the nature of the goods sold on Silk Road, it is quite clear that various law enforcement agencies 
may have a strong interest in trying to disrupt Silk Road operations. They appear, so far, to have been 
unsuccessful since the site is still up and has grown in size since Sen. Schumer called on the U.S. Attorney 
General and the head of the U.S. Drug Enforcement Agency to put an end to it. 

We discuss four possible intervention strategies that could be considered: disrupting the network, dis- 
rupting the financial infrastructure, disrupting the delivery model, and laissez-faire. 

Attacking the network. The first possible intervention policy is to disrupt the Tor network. Indeed, without 
Tor, Silk Road cannot operate. This strategy is very likely to be difficult to put in place. First, Tor has many 
uses beneficial to society - Silk Road and other anonymous online marketplaces are far from representing 
the majority of Tor traffic, even though this work argues that their importance is growing. Tor is routinely 
used by oppressed individuals to communicate without fear of reprisal. Thus, disrupting the entire Tor 
network for the purpose of taking down Silk Road would come at a potentially high collateral cost. 

Furthermore, Tor has shown to be resilient to a large number of attacks, due to its open design and to the 
large amount of academic research it fosters. In particular, Tor hidden services, like Silk Road, have been 
the subject of considerable scrutiny Il27ll29l . 0verlier and Syverson showed that timing and intersection 
attacks could be used to reveal the location of hidden services. Most of these concerns have been addressed 
in recent versions of Tor, e.g., through the use of "entry guards." Murdoch described how covert channels 
(specifically, clock skew) could leak information allowing to pinpoint the location of a hidden service. 

Attacking the financial infrastructure. Another possible disruption strategy is to attack the financial infras- 
tructure supporting Silk Road. Bitcoin has shown, in the past, to be a very volatile currency. The June 201 1 
theft of a large number of Bitcoins from the Mt.Gox exchange [4] actually caused an abrupt collapse of the 
currency. Certain users have been complaining in forums of the uncertainty on the prices they end up paying 
due to the instability of Bitcoin and the various commissions they have to pay to purchase Bitcoins, and then 
to purchase items on Silk Road |6j. 

Disrupting the Bitcoin network appears, compared to attacking the Tor network, to be a more actionable 
possibility. In fact, in the aforementioned Gawker article iflOl one of the Bitcoin developers argued that 
Bitcoin was not providing the level of security Silk Road and other anonymous marketplace operators would 
desire. More precisely, recent research [30] has shown that Bitcoin transactions are partially vulnerable to 
traffic analysis. Indeed, the history of all transactions is publicly available and network analysis can allow 
to map sets of public keys to individual users and transactions. 

Since currency exchanges like Mt.Gox where users redeem Bitcoins for cash bind public keys to actual 
identities, Bitcoin anonymity guarantees are weaker than most Silk Road users seem to assume, even though 
additional intermediaries (tumblers) are in place. In particular, large Silk Road sellers withdrawing massive 
amounts of Bitcoins at once may be relatively easily identified. 

Attacking the delivery model. Another possible angle of action is to attack the delivery model. That is, 
to reinforce controls at the post office and/or at customs to prevent illicit items from being delivered to 
their destination. One interesting finding from this work is the apparent lack of worries a large number of 
sellers have: Most items are marked as shipping internationally, which means that the risk of package loss or 



20 



destruction is viewed as minimal by the sellers. This is certainly an area that warrants further investigation. 
In the United States, coordination between agencies is paramount: Customs (which can inspect mail) need 
to work in concert with Drug Enforcement Agency (DEA) and/or Food and Drugs Administration (FDA), 
depending on the type of item concerned. Yet, very often, packages that are seized are simply destroyed, or 
returned to the sender. 

Laissez-faire. Finally, a last possible intervention strategy is actually not to intervene. Politically, this is 
a questionable proposition, as it may sound as an admission of weakness. There are however studies that 
show that drug abuse prevention is considerably more cost-efficient than enforcing drug prohibition |9). 
The relatively rapidly expanding business of online anonymous markets such as Silk Road and the logistic 
difficulties in shutting down such markets may further tilt the economic balance toward prevention and 
cure. As a result, laissez-faire, however untenable it might currently appear from a policy standpoint, might 
become even more attractive in light of budget constraints. Although there is no public statement about it, 
this could be the strategy currently adopted by law enforcement, seeing that the marketplace has not met any 
significant disruption to its operations, other than transient technical issues, in the past nine months, while 
at the same time sales volumes have doubled. 

7 Related work 

From a technical standpoint, this work is closely related to rapidly growing literature on measuring cyber- 
crime (e.g., n3[lS[l7l[I3|20l|22l23ISl|25l|33l). The techniques used in this paper (periodic crawls, use 
of anonymous networks) to collect measurements indeed are relatively common to most work in this field. 
However, the main difference between this work and the related cybercrime literature is the object of the 
measurements. Instead of trying to characterize a security attack or the behavior of an attacker, we are in- 
stead trying to describe as precisely as possible an online marketplace. In that respect, our work shares some 
similarities with works that have tried to model transactions on eBay Ifl4ll3ll or Amazon |[26l . However, 
we do not focus much on customer reviews to assess seller reputation but instead primarily use feedback as 
proxy for sales volume. 

At first glance quite similar to our work, McCoy et al. provided a characterization of traffic using the 
Tor network by monitoring a Tor exit node [19]. Different from this research, we do not actually monitor 
Tor traffic and instead analyze data posted to an online marketplace. Motoyama et al. ll25l performed 
related measurements to evidence the existence of online "mule" recruitment schemes in crowdsourcing 
marketplaces. 

A more recent paper ll20l uses leaked transaction databases to precisely estimate the revenues and prof- 
its of three major illicit online pharmacy affiliate networks. Contrary to Silk Road, these networks heavily 
resort to spam ifTTl and search-engine manipulation lfl6l for advertising. Mc Coy et al. find that, between 
2007 and 201 1 the gross revenues of each of these illicit affiliate networks range from USD 12.8 million/year 
to USD 67.7 million/year. Without any advertising other than word-of-moufh, Silk Road, with its USD 22 
million/year transaction volume, appears to be comparable in size with these illicit online pharmacy net- 
works. At the same time, Silk Road caters to a priori more technically sophisticated users, and proposes an 
inventory that far exceeds prescription drugs; as such, it seems to occupy a market niche different from that 
of traditional illicit online pharmacies. 

Our work is also close in spirit to a number of studies in the drug policy realm. We particularly single 
out the work by Caulkins and Reuter [8] who perform an econometric analysis of drug markets to discuss 
their structure. Finally, we note that Molnar et al. ||2T1 noted that a number of techniques used to perform 
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analysis of controlled substance markets could be applied to online crime as well. Our paper shows that 
there may be a convergence between the two fields. 



8 Conclusion 

We have performed what we believe is the first comprehensive measurement analysis of one of the largest 
anonymous online marketplaces, Silk Road. We performed pilot crawls, and subsequently collected daily 
measurements for six months (February 3, 2012-July 24, 2012). We analyzed over 24,000 items, and 
parsed over 180,000 feedback messages. We were able to determine that Silk Road indeed mostly caters to 
drug users (although other items are also available), that it consists of a relatively international community, 
and that a large number of sellers do not stay active on the site for very long. We further discovered that 
sales volume is increasing; currently corresponding to approximately USD 1.9 million/month for the entire 
marketplace, corresponding to USD 143,000/month in commissions for Silk Road operators. Informed by 
these measurements, we discussed some of the possible policy remedies. A surprising result is the tight 
coupling between Silk Road and the Bitcoin market - the daily sales on Silk Road correspond to almost 
20% of the average daily volume of USD-BTC exchanges on Mt.Gox, the largest exchange forum. As 
a result, it seems like a potentially effective intervention policy would be to destabilize the value of the 
Bitcoin, to create instability in the marketplace. 
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